{"id":"CVE-2016-7867","aliases":["EUVD-2016-8716","GHSA-gcxq-976r-wv2c","MGASA-2017-0014","RHSA-2016:2947","SUSE-SU-2016:3148-1"],"status":"published","title":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.10965,"percentile":0.95912,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2016-12-14T10:10:26Z","modified":"2026-06-29T10:14:40Z","affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.194-1.mga5.nonfree"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.0.0.186-1.el6_8"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.186-152.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.186-152.1"}]}],"bundled":17}],"products":[{"vendor":"adobe","product":"flash_player"},{"vendor":"adobe","product":"flash_player_desktop_runtime"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154","tags":["vendor-advisory","x_refsource_MS","x_transferred","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/94871","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201701-17","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037442","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-622","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2947.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-39.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7867","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gcxq-976r-wv2c"},{"url":"https://advisories.mageia.org/MGASA-2017-0014.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19960","tags":["report"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb17-02.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2947","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404307","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2947.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7867","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7870","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7870","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7870","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7871","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7875","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7878","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7878","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7880","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7892","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163148-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015379","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7892","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7867","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:31:00Z","modified":"2024-08-06T02:13:20.317Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8716","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:31:00Z","modified":"2024-08-06T02:13:20Z","updated_at":"2026-11-03T02:22:31.485682Z"}],"ghsa":[{"id":"GHSA-gcxq-976r-wv2c","title":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2022-05-14T02:21:49Z","modified":"2023-01-28T05:00:55Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:43:26.967621Z"}],"nvd":[{"id":"CVE-2016-7867","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:59:30.94Z","modified":"2026-06-17T00:53:40.083Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"RHSA-2016:2947","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T14:38:10Z","modified":"2026-06-29T10:14:40Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"MGASA-2017-0014","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 24.0.0.194 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow\nan attacker to take control of the affected system.\n\nAdobe is aware of a report that an exploit for CVE-2016-7892 exists in\nthe wild, and is being used in limited, targeted attacks against users\nrunning Internet Explorer (32-bit) on Windows.\n\nThis update resolves security bypass vulnerabilities (CVE-2016-7890,\nCVE-2017-2938).\n\nThis update resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878,\nCVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892,\nCVE-2017-2932, CVE-2017-2936, CVE-2017-2937). \n\nThis update resolves buffer overflow vulnerabilities that could lead to\ncode execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869,\nCVE-2016-7870, CVE-2017-2927, CVE-2017-2933, CVE-2017-2934,\nCVE-2017-2935).\n\nThis update resolves memory corruption vulnerabilities that could lead\nto code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874,\nCVE-2016-7875, CVE-2016-7876, CVE-2017-2925, CVE-2017-2926,\nCVE-2017-2928, CVE-2017-2930, CVE-2017-2931).\n\nNote that Adobe has dropped Adobe Access DRM support from all their\nLinux releases since their 11.2 release series (which no longer gets\nsecurity updates), so any Flash content protected with Adobe Access\nwill no longer work.\n","status":"published","published":"2017-01-13T10:32:16Z","modified":"2026-04-16T06:23:04.169563423Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:3148-1","title":"Security update for flash-player","description":"\nThis update for flash-player fixes the following issues:\n\n- Security update to 24.0.0.186 (bsc#1015379) APSB16-39:\n    * These updates resolve use-after-free vulnerabilities that could have\n      lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878,\n      CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892).\n    * These updates resolve buffer overflow vulnerabilities that could have lead to\n      code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870).\n    * These updates resolve memory corruption vulnerabilities that could have lead to\n      code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874,\n      CVE-2016-7875, CVE-2016-7876).\n    * These updates resolve a security bypass vulnerability (CVE-2016-7890).\n- Keep standalone flashplayer at version 11, no newer version\n  exists (INSECURE!).\n- Update EULA to version 24.0.\n","status":"published","published":"2016-12-14T10:10:26Z","modified":"2026-02-04T02:53:47.852715Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}